Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svchost' = '%HOMEPATH%\AppData\Local\Temp\jusched.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svchost' = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- %TEMP%\nsi2.tmp\ymsgr_suite_setup.exe /yfn=msgr11us.exe /ybsini=%TEMP%\nsi2.tmp\BOOTST~1.INI
- %HOMEPATH%\AppData\Local\Temp\msgr11us.exe
- %HOMEPATH%\AppData\Local\Temp\jusched.exe
- [<HKCU>\Software\Yahoo\pager]
- %TEMP%\nst4.tmp\System.dll
- %TEMP%\nsi2.tmp\YExecShell.dll
- %TEMP%\nst4.tmp\InetLoad_vms.dll
- %TEMP%\nst4.tmp\ymsgr11_us.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ymsgr11_us[1].ini
- %TEMP%\nsi2.tmp\ymsgr_suite_setup.exe
- %HOMEPATH%\AppData\Local\Temp\jusched.exe
- %HOMEPATH%\AppData\Local\Temp\msgr11us.exe
- %TEMP%\nsi2.tmp\System.dll
- %TEMP%\nsi2.tmp\Base64.dll
- %TEMP%\nsi2.tmp\bootstrap.ini
- '67.##5.160.76':80
- 67.##5.160.76/ycontent/stats.php?ve###############################################################################################
- 67.##5.160.76/msgr/11/ini/ymsgr11_us.ini
- DNS ASK in#####.msg.yahoo.com
- DNS ASK rd.####ware.yahoo.com
- '<IP-адрес в локальной сети>':1036
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''